law pad6_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/packed_proof.bend:674

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend as P
import bend-collections@1.0.0.0/spec/crypto/sha/packed.bend as R
import bend-collections@1.0.0.0/src/crypto/sha/state.bend as S

674law pad6_correct:
675  for +extra: Nat
676  for +index: U32
677  for +s: S.State
678  for +remain: Nat
679  for +total: Nat
680  for +w0: U32
681  for +w1: U32
682  for +w2: U32
683  for +w3: U32
684  for +w4: U32
685  for pair: Array<U32> & U32
686  {P.pad6(extra,index,s,remain,total,w0,w1,w2,w3,w4,pair) == R.gather(extra,10n,index,True{},remain,total,s,[w4,w3,w2,w1,w0],pair) : Array<U32> & S.State}